From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Nicolas Avrutin Newsgroups: gmane.emacs.bugs Subject: bug#13867: 24.3.50; reading certain emails containing images in mu4e causes segfault Date: Thu, 07 Mar 2013 12:57:14 -0500 Message-ID: <87fw07ytxh.fsf@gateway.local.navru.net> References: <5135776E.3070603@cs.ucla.edu> <877glmpagw.fsf@gateway.local.navru.net> <5135B1F0.2010202@cs.ucla.edu> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1362679056 27062 80.91.229.3 (7 Mar 2013 17:57:36 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 7 Mar 2013 17:57:36 +0000 (UTC) Cc: 13867@debbugs.gnu.org To: "Paul Eggert" Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Thu Mar 07 18:58:00 2013 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1UDf4p-0004y9-G3 for geb-bug-gnu-emacs@m.gmane.org; Thu, 07 Mar 2013 18:57:59 +0100 Original-Received: from localhost ([::1]:46632 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UDf4T-0006kP-S4 for geb-bug-gnu-emacs@m.gmane.org; Thu, 07 Mar 2013 12:57:37 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:34398) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UDf4P-0006kA-FS for bug-gnu-emacs@gnu.org; Thu, 07 Mar 2013 12:57:35 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1UDf4N-0006R2-3Z for bug-gnu-emacs@gnu.org; Thu, 07 Mar 2013 12:57:33 -0500 Original-Received: from debbugs.gnu.org ([140.186.70.43]:60999) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UDf4M-0006Qv-Sc for bug-gnu-emacs@gnu.org; Thu, 07 Mar 2013 12:57:31 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.72) (envelope-from ) id 1UDf4s-0006vO-Sc for bug-gnu-emacs@gnu.org; Thu, 07 Mar 2013 12:58:03 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Nicolas Avrutin Original-Sender: debbugs-submit-bounces@debbugs.gnu.org Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 07 Mar 2013 17:58:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 13867 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Original-Received: via spool by 13867-submit@debbugs.gnu.org id=B13867.136267907826603 (code B ref 13867); Thu, 07 Mar 2013 17:58:02 +0000 Original-Received: (at 13867) by debbugs.gnu.org; 7 Mar 2013 17:57:58 +0000 Original-Received: from localhost ([127.0.0.1]:36874 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1UDf4n-0006v1-CK for submit@debbugs.gnu.org; Thu, 07 Mar 2013 12:57:58 -0500 Original-Received: from mail-qa0-f51.google.com ([209.85.216.51]:43381) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1UDf4k-0006uo-Fa for 13867@debbugs.gnu.org; Thu, 07 Mar 2013 12:57:56 -0500 Original-Received: by mail-qa0-f51.google.com with SMTP id cr7so475183qab.10 for <13867@debbugs.gnu.org>; Thu, 07 Mar 2013 09:57:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:from:to:cc:subject:references:user-agent:in-reply-to :date:message-id:mime-version:content-type; bh=ktB8vlBB5nbm0ngb2AuCUp91Eb+ECAp/WtCpJULz9Us=; b=SDD2epp0oWsCVpByqmuzoZRzq8C7owGDrdlu78Kl4Fql7uSHJsByJgH+aMryNeoNWo jSY4eJUCzmfJ5auk+pxnbh9W4ik3TgnWtenLaidRQnICMqxn8Km2m3KJLhIXrPrx707o qA3UonvMqBOClDXA0Mj+/5niv2m/9WK/kXmZUviuyQUj96dbv8az1b+F7HbucN3vRJ5L KWF/Qfw/btsxfhwmUrXbXqIQ1nrxj87LnPa/lsAqiwfXsYhnPh/HZyFMtLb2agMmbFCD oiJQeB+cO75eb6RE0M+5VjBJ/G7YPclhF8N7jdJy4UTAOt6Jsz/WFskI5dgp/9qwb4w+ eglw== X-Received: by 10.49.121.196 with SMTP id lm4mr55772294qeb.18.1362679036304; Thu, 07 Mar 2013 09:57:16 -0800 (PST) Original-Received: from gateway.local.navru.net ([2001:470:1f07:7d5::109]) by mx.google.com with ESMTPS id gw9sm3850472qab.10.2013.03.07.09.57.14 (version=TLSv1.2 cipher=RC4-SHA bits=128/128); Thu, 07 Mar 2013 09:57:15 -0800 (PST) User-agent: mu4e 0.9.9.5-dev6; emacs 24.3.50.1 In-reply-to: <5135B1F0.2010202@cs.ucla.edu> X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:72206 Archived-At: Took some finicking with the mu4e elisp to get it to run under temacs (temacs doesn't like sendmail), but I got it. Valgrind info below. I can leave that valgrind session open for a few days in case you want me check anything else from within valgrind (if so, give me specific commands to run, I haven't used valgrind beyond memcheck). Also, I found this bug on the mu4e issue tracker, though it doesn't look like there is any useful information there: https://github.com/djcb/mu/issues/143[1] Here's what valgrind gives me: ==5565== Invalid write of size 4 ==5565== at 0x8AD3791: AcquireQuantumInfo (in /usr/lib/libMagickCore-Q16.so.7.0.0) ==5565== by 0x2373680E: ??? (in /usr/lib/ImageMagick-6.8.2/modules-Q16/coders/png.so) ==5565== by 0x2373762F: ??? (in /usr/lib/ImageMagick-6.8.2/modules-Q16/coders/png.so) ==5565== by 0x8A093BF: ReadImage (in /usr/lib/libMagickCore-Q16.so.7.0.0) ==5565== by 0x870C5BB: MagickReadImage (in /usr/lib/libMagickWand-Q16.so.7.0.0) ==5565== by 0x6748D7: imagemagick_load_image (image.c:7685) ==5565== by 0x67537D: imagemagick_load (image.c:7978) ==5565== by 0x66BF56: lookup_image (image.c:1697) ==5565== by 0x43B844: handle_single_display_spec (xdisp.c:5017) ==5565== by 0x43A0AF: handle_display_spec (xdisp.c:4515) ==5565== by 0x439EE8: handle_display_prop (xdisp.c:4467) ==5565== by 0x437194: handle_stop (xdisp.c:3219) ==5565== Address 0x60 is not stack'd, malloc'd or (recently) free'd Backtrace: ./temacs[0x55a542] ./temacs[0x536722] ./temacs[0x55a064] ./temacs[0x55a039] ./temacs[0x55a09a] /usr/lib/libpthread.so.0(+0xf1e0)[0xaca31e0] /usr/lib/libMagickCore-Q16.so.7(AcquireQuantumInfo+0x61)[0x8ad3791] /usr/lib/ImageMagick-6.8.2/modules-Q16/coders/png.so(+0x1780f)[0x2373680f] /usr/lib/ImageMagick-6.8.2/modules-Q16/coders/png.so(+0x18630)[0x23737630] /usr/lib/libMagickCore-Q16.so.7(ReadImage+0x190)[0x8a093c0] /usr/lib/libMagickWand-Q16.so.7(MagickReadImage+0x6c)[0x870c5bc] ./temacs[0x6748d8] ./temacs[0x67537e] ./temacs[0x66bf57] ./temacs[0x43b845] ./temacs[0x43a0b0] ./temacs[0x439ee9] ./temacs[0x437195] ./temacs[0x44373f] ./temacs[0x43fbf6] ./temacs[0x461ae1] ./temacs[0x458e73] ./temacs[0x4568e0] ./temacs[0x451517] ./temacs[0x5d2f10] ./temacs[0x4508c0] ./temacs[0x44e650] ./temacs[0x53cf34] ./temacs[0x549c0d] ./temacs[0x53af8d] ./temacs[0x5d2d95] ./temacs[0x53a8d6] ./temacs[0x5d2769] ./temacs[0x53a837] ./temacs[0x53a002] ./temacs[0x53a1a5] ./temacs[0x5d5f73] ./temacs[0x61d1ca] ./temacs[0x5d66d0] ./temacs[0x5d6184] ./temacs[0x5d536a] -- Nicolas Avrutin